Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          p+5OTvLwCJTFC934wrUc3fiI8t49FIeWX1nFYhS4u68=
Subject key identifier:   CA:A3:28:EE:28:20:11:C8:3C:EC:71:40:B8:3E:E0:4E:3B:AF:7C:AA
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       5781F231DB4F0D56DED73F7276DAD1260114BE38
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:06 +0000
ROA not before:           Sun 29 Mar 2026 19:17:06 +0000
ROA not after:            Sun 28 Mar 2027 19:22:06 +0000
asID:                     215956
IP address blocks:        2a14:7580:edc0::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:81:f2:31:db:4f:0d:56:de:d7:3f:72:76:da:d1:26:01:14:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:06 2026 GMT
            Not After : Mar 28 19:22:06 2027 GMT
        Subject: CN=CAA328EE282011C83CEC7140B83EE04E3BAF7CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:28:de:e7:d0:15:79:d3:eb:9d:f2:33:c3:
                    4a:00:cf:70:2e:d4:64:2f:f0:86:6b:92:55:d4:b8:
                    e4:25:d5:ef:91:1a:65:85:2d:42:ef:01:b4:17:ac:
                    2d:bd:64:56:4e:3b:9f:b1:c5:93:c7:39:06:4a:8d:
                    13:90:b6:5c:d7:45:79:53:27:55:92:27:e4:f8:36:
                    eb:d3:90:87:33:de:dc:fe:da:8a:7d:d2:31:37:3a:
                    e5:95:0c:09:25:c8:9e:da:00:47:cd:b0:b6:12:06:
                    93:94:6e:83:2a:fd:6f:cd:b6:27:2e:16:3c:80:6e:
                    35:63:21:c7:70:88:0d:58:49:6d:6d:e1:47:d8:8e:
                    8b:61:50:dc:af:ed:26:f5:c3:f5:12:be:d7:61:c8:
                    3d:a4:0f:af:83:46:b4:ab:54:80:03:c7:05:65:49:
                    06:dc:db:00:2b:fa:54:6f:1e:ff:61:dd:ce:ea:eb:
                    0a:be:c5:b5:10:c6:58:91:d1:ce:11:0f:67:2a:22:
                    89:1f:03:3f:3a:f9:f0:21:85:45:a6:1a:c8:a3:3b:
                    18:01:d3:3f:7b:23:89:b4:76:d4:57:5b:43:96:d8:
                    50:24:66:38:32:51:4d:47:a6:01:06:92:da:9e:5e:
                    70:9e:38:bd:9f:b1:ce:51:ee:9d:35:c2:77:4e:96:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:28:EE:28:20:11:C8:3C:EC:71:40:B8:3E:E0:4E:3B:AF:7C:AA
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:edc0::/47

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:a3:10:5e:8d:17:74:eb:81:8b:7b:bd:4c:b4:79:1f:83:
         06:a6:96:7f:bd:9b:38:6c:3a:16:61:da:af:63:76:e9:ae:1d:
         eb:4c:66:56:73:cf:c5:72:61:ac:d4:7f:80:7d:ab:e1:a3:4c:
         f2:06:4b:3d:ae:65:67:11:15:3e:e2:52:91:1d:aa:08:ea:0b:
         f9:81:84:3d:2f:59:77:79:5e:c9:8e:02:22:fa:27:73:11:1a:
         f7:17:d8:58:6c:d0:61:ef:13:46:42:09:db:59:26:4a:c3:1c:
         4f:5b:d2:d7:fb:37:62:3f:e4:71:48:63:43:1e:77:6a:8b:6d:
         cc:2a:5f:b3:ad:9c:ad:e6:30:c5:8b:7d:2a:71:47:87:3a:ef:
         f9:ec:28:fc:0d:e2:bc:cd:f7:4c:59:a6:ee:b1:4e:f5:e6:37:
         0f:09:f0:b2:74:3a:bd:d2:c8:2f:f8:b0:96:d2:af:b4:e3:17:
         d2:95:9f:35:4e:5f:7b:5a:03:7b:d1:0b:eb:3e:8b:e4:94:92:
         49:15:59:af:26:3d:2e:e9:bf:7f:1a:a2:da:62:0c:90:fc:43:
         33:f8:7b:62:c1:99:8a:b6:a4:26:30:aa:93:d6:18:45:5f:db:
         cf:ec:d8:ca:cd:89:71:1f:e9:c8:71:6a:c6:2f:f4:d7:0e:0d:
         29:8e:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----